From oracle-l-bounce@freelists.org Tue Oct 25 06:22:23 2005 Return-Path: Received: from air891.startdedicated.com (root@localhost) by orafaq.com (8.12.10/8.12.10) with ESMTP id j9PBMNcn023545 for ; Tue, 25 Oct 2005 06:22:23 -0500 X-ClientAddr: 206.53.239.180 Received: from turing.freelists.org (freelists-180.iquest.net [206.53.239.180]) by air891.startdedicated.com (8.12.10/8.12.10) with ESMTP id j9PBMKvX023533 for ; Tue, 25 Oct 2005 06:22:20 -0500 Received: from localhost (localhost [127.0.0.1]) by turing.freelists.org (Avenir Technologies Mail Multiplex) with ESMTP id 3E84A20DDB1; Tue, 25 Oct 2005 06:22:16 -0500 (EST) Received: from turing.freelists.org ([127.0.0.1]) by localhost (turing [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 04082-07; Tue, 25 Oct 2005 06:22:16 -0500 (EST) Received: from turing (localhost [127.0.0.1]) by turing.freelists.org (Avenir Technologies Mail Multiplex) with ESMTP id BC77C20DCE7; Tue, 25 Oct 2005 06:22:15 -0500 (EST) Message-ID: <0a4101c5d966$ff742320$6401a8c0@dilbert> From: "Don Granaman" To: Subject: SYS$OPTIONS in audit file? Date: Tue, 25 Oct 2005 06:21:23 -0700 MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" x-mimeole: Produced By Microsoft MimeOLE V6.00.2800.1506 X-archive-position: 27527 X-ecartis-version: Ecartis v1.0.0 Sender: oracle-l-bounce@freelists.org Errors-To: oracle-l-bounce@freelists.org X-original-sender: granaman@cox.net Precedence: normal Reply-To: granaman@cox.net X-list: oracle-l X-Virus-Scanned: by amavisd-new-20030616-p9 (Debian) at avenirtech.net X-mailscan-MailScanner-Information: Please contact the ISP for more information X-mailscan-MailScanner: Found to be clean X-MailScanner-From: oracle-l-bounce@freelists.org X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on air891.startdedicated.com X-Spam-Level: X-Spam-Status: No, hits=-2.5 required=5.0 tests=AWL,BAYES_00 autolearn=ham version=2.63 When audit_trail=OS, what does SYS$OPTIONS represent in the audit log file? (AKA "ACTION" is a reference to AUDIT_ACTIONS). For example, in some tests after "audit system audit:", then "audit user" followed by "noaudit user", I see SYS$OPTIONS: "16" in the audit log, but have no idea how to relate this to anything I can look up. It must mean "user" somehow, because the information that noaudit was done is there and other typical audit trail information, but there is nothing to indicate that it was "noaudit user". -- http://www.freelists.org/webpage/oracle-l